Sanitize referrers before we create them

content/browser/indexed_db/indexed_db_internals_ui.cc

 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/indexed_db/indexed_db_internals_ui.h"
 
 #include <string>
 
 #include "base/bind.h"
 #include "base/files/scoped_temp_dir.h"
@@ skipping 281 matching lines @@
     size_t connection_count) {
   DCHECK(BrowserThread::CurrentlyOn(BrowserThread::UI));
   const GURL url = GURL(FILE_PATH_LITERAL("file://") + zip_path.value());
   BrowserContext* browser_context =
       web_ui()->GetWebContents()->GetBrowserContext();
   scoped_ptr<DownloadUrlParameters> dl_params(
       DownloadUrlParameters::FromWebContents(web_ui()->GetWebContents(), url));
   DownloadManager* dlm = BrowserContext::GetDownloadManager(browser_context);
 
   const GURL referrer(web_ui()->GetWebContents()->GetLastCommittedURL());
-  dl_params->set_referrer(
-      content::Referrer(referrer, blink::WebReferrerPolicyDefault));
+  dl_params->set_referrer(content::Referrer::SanitizeForRequest(
+      url, content::Referrer(referrer, blink::WebReferrerPolicyDefault)));
 
   // This is how to watch for the download to finish: first wait for it
   // to start, then attach a DownloadItem::Observer to observe the
   // state change to the finished state.
   dl_params->set_callback(base::Bind(&IndexedDBInternalsUI::OnDownloadStarted,
                                      base::Unretained(this),
                                      partition_path,
                                      origin_url,
                                      temp_path,
                                      connection_count));
@@ skipping 56 matching lines @@
 
   item->AddObserver(new FileDeleter(temp_path));
   web_ui()->CallJavascriptFunction(
       "indexeddb.onOriginDownloadReady",
       base::StringValue(partition_path.value()),
       base::StringValue(origin_url.spec()),
       base::FundamentalValue(static_cast<double>(connection_count)));
 }
 
 }  // namespace content